CN113900877A - Automatic change testing arrangement - Google Patents

Automatic change testing arrangement Download PDF

Info

Publication number
CN113900877A
CN113900877A CN202111496718.0A CN202111496718A CN113900877A CN 113900877 A CN113900877 A CN 113900877A CN 202111496718 A CN202111496718 A CN 202111496718A CN 113900877 A CN113900877 A CN 113900877A
Authority
CN
China
Prior art keywords
test case
test
control system
maintenance device
industrial control
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN202111496718.0A
Other languages
Chinese (zh)
Other versions
CN113900877B (en
Inventor
程学
阮涛
黄佳
梁猛
张宙
张扬
马海涛
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Zhejiang Qi'an Information Technology Co ltd
Original Assignee
Zhejiang Qi'an Information Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Zhejiang Qi'an Information Technology Co ltd filed Critical Zhejiang Qi'an Information Technology Co ltd
Priority to CN202111496718.0A priority Critical patent/CN113900877B/en
Publication of CN113900877A publication Critical patent/CN113900877A/en
Application granted granted Critical
Publication of CN113900877B publication Critical patent/CN113900877B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/22Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing
    • G06F11/2273Test methods
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/22Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing
    • G06F11/2268Logging of test results

Abstract

The application provides an automatic change testing arrangement for test portable industrial control system fortune dimension device includes: the first test unit and the second test unit are respectively connected with the operation and maintenance device of the mobile industrial control system, and the first test unit is in communication connection with the second test unit; the first test unit sends a test case to the mobile industrial control system operation and maintenance device; if the test case is released, the second test unit analyzes the test case and feeds back an analysis result to the first test unit; obtaining a release strategy according to the analysis result, if the release strategy is interception, judging that the mobile industrial control system operation and maintenance device fails to execute instruction control, otherwise, judging that the execution instruction control is successful; if the test case is intercepted, the first test unit analyzes the test case, if the release strategy is the interception test case, the execution instruction control is judged to be successful, and otherwise, the execution instruction control is judged to be failed; the first test unit generates a test report after the execution of each test case is completed.

Description

Automatic change testing arrangement
Technical Field
The application relates to the technical field of industrial control safety testing, in particular to an automatic testing device.
Background
In recent years, along with deep integration of industrialization and informatization and rapid promotion of internet of things, a modern industrial control platform has become a core control platform and a central nerve in the national key infrastructure fields of electric power, petrochemical industry, nuclear industry, aerospace, railways, water treatment and the like. But security threats such as viruses, trojans, intrusion attacks, denial of service and the like faced by the traditional information network have gradually spread to the industrial control system.
The mobile industrial control system operation and maintenance device carries out safe operation and maintenance by carrying out safe isolation between the operation and maintenance equipment and the operated and maintained equipment, auditing operation and maintenance behaviors, preventing and killing viruses and the like in the operation and maintenance operation process, and solves the field operation and maintenance problem and simultaneously greatly reduces the field safety control problem of the industrial control system.
However, the premise of using the mobile industrial control system operation and maintenance device is to ensure the accuracy of the mobile industrial control system operation and maintenance device. In the prior art, the method is mainly operated manually, different instructions are sent through a simulation mode by clicking a serial port client tool, the operation and maintenance device of the mobile industrial control system is tested, and the treatment strategy rules of the different instructions are tested, so that whether the high-risk instructions can be intercepted or not when the high-risk instructions are matched with the interception rules is verified. However, the efficiency of manual testing is low, manual operation is easy to fail, and the testing time is prolonged seriously when the number of the instruction filtering rules is large.
Disclosure of Invention
The utility model aims to provide a technical scheme solves the artifical inefficiency that tests portable industrial control system fortune dimension device that exists among the prior art, problem that the error rate is high.
Based on above technical problem, this application provides an automatic testing arrangement for test portable industrial control system fortune dimension device, automatic testing arrangement includes:
the first test unit is connected with a first port of the mobile industrial control system operation and maintenance device;
the second test unit is connected with a second port of the mobile industrial control system operation and maintenance device;
the first test unit is in communication connection with the second test unit;
the first test unit sends a test case to the mobile industrial control system operation and maintenance device, the test case is used for triggering the mobile industrial control system operation and maintenance device to execute instruction management and control, and the instruction management and control comprises the steps of matching the test case and intercepting or releasing the test case according to a matching result;
if the test case is released by the mobile industrial control system operation and maintenance device, the test case is received by the second test unit, the second test unit is triggered to analyze the test case, and the analysis result of the test case is fed back to the first test unit;
the test case is preset with a release strategy, the release strategy is to intercept or release the test case,
the first testing unit acquires the release strategy preset by the test case according to the analysis result of the test case, if the release strategy is to intercept the test case, the mobile industrial control system operation and maintenance device is judged to fail to control the execution instruction of the test case, and if the release strategy is to release the test case, the mobile industrial control system operation and maintenance device is judged to succeed in controlling the execution instruction of the test case;
if the test case is intercepted by the mobile industrial control system operation and maintenance device, the first test unit analyzes the test case, a release strategy preset by the test case is obtained according to an analysis result, if the release strategy is that the test case is intercepted, the mobile industrial control system operation and maintenance device is judged to successfully control the execution instruction of the test case, and if the release strategy is that the test case is released, the mobile industrial control system operation and maintenance device is judged to fail to control the execution instruction of the test case;
and the first test unit generates a test report after the execution of each test case is completed.
Further, the test case is a function code protocol packet written according to the IEC101 protocol.
Further, when the mobile industrial control system operation and maintenance device executes an instruction to control and release the function code protocol packet, the function code protocol packet is sent to the second test unit through the second interface;
and the second test unit receives the function code protocol packet, unpacks the function code protocol packet according to a structure body of an IEC101 protocol to obtain a type identifier, and sends the type identifier to the first test unit as an analysis result of the test case.
Further, the first test unit includes a release policy storage module, where release policies corresponding to different types of identifiers are stored in the release policy storage module;
the first test unit matches the received type identification, acquires the release strategy corresponding to the type identification from the release strategy storage module,
if the release strategy of the type identification is to intercept the test case, it is judged that the mobile industrial control system operation and maintenance device fails to control the execution instruction of the test case, and if the release strategy is to release the test case, it is judged that the mobile industrial control system operation and maintenance device successfully controls the execution instruction of the test case.
Furthermore, the first test unit further comprises a test case interception judging module, which is used for judging whether the test case is intercepted by the mobile industrial control system operation and maintenance device;
the test case interception judging module comprises a timer, the timer is provided with a first time threshold, when the first test unit sends the test case, the timer starts timing, and if the timing time exceeds the first time threshold, the first test unit still does not receive the analysis result of the test case fed back by the second test unit, the test case is judged to be intercepted by the mobile industrial control system operation and maintenance device.
Further, when the test case interception judging module judges that the test case is intercepted by the mobile industrial control system operation and maintenance device, the first test unit unpacks the function code protocol package according to the structure body of the IEC101 protocol to obtain the type identifier,
the first test unit comprises a release strategy storage module, and release strategies corresponding to different type identifications are stored in the release strategy storage module;
the first testing unit matches the type identification, a release strategy corresponding to the type identification is obtained from the release strategy storage module, if the release strategy of the type identification is to intercept the test case, the mobile industrial control system operation and maintenance device is judged to successfully control the execution instruction of the test case, and if the release strategy is to release the test case, the mobile industrial control system operation and maintenance device is judged to fail to control the execution instruction of the test case.
Further, under the condition that the operation and maintenance device of the mobile industrial control system is in a normal working state, the release strategies corresponding to different type identifiers preset by the first test unit are respectively consistent with the result of the mobile industrial control system operation and maintenance device controlling the execution instruction of the test case corresponding to each type identifier.
Further, the first test unit sends a data packet in a fixed frame length format to the mobile industrial control system operation and maintenance device periodically according to the IEC101 protocol, where the data packet in the fixed frame length format is used to maintain the link connection between the first test unit and the mobile industrial control system operation and maintenance device.
Further, the data packet with the fixed frame length format is sent to the second test unit through the mobile industrial control system operation and maintenance device;
after the data packet with the fixed frame length format is received by the second testing unit, the second testing unit unpacks the data packet with the fixed frame length format, and the data packet with the fixed frame length format is identified by the second testing unit according to the unpacking result,
the second test unit judges that the data received this time is the data packet in the fixed frame length format but not the test case, and discards the data packet in the fixed frame length format.
Further, the first test unit and the second test unit are connected through a serial interface.
The application provides an automatic testing arrangement simulates portable industrial control system fortune dimension device scene at the on-the-spot fortune dimension through first test unit and second test unit for break away from the test and the actual scene to portable industrial control system fortune dimension device, be more convenient for to the test of portable industrial control system fortune dimension device. Moreover, the automatic testing device provided by the application replaces the process of manually inputting the instruction, can automatically judge whether the instruction is released or not, and solves the problems of low efficiency and high error rate of manual testing of the operation and maintenance device of the mobile industrial control system in the prior art.
Drawings
Fig. 1 is a schematic view of a use scene of an operation and maintenance device of a mobile industrial control system in the prior art;
FIG. 2 is a schematic diagram of an automated testing apparatus provided herein;
FIG. 3 is a schematic view of a usage scenario of the automated testing apparatus provided herein;
fig. 4 is a schematic diagram illustrating a connection between a first test unit and a serial port of a mobile industrial control system operation and maintenance device provided by the present application;
fig. 5 is a schematic diagram of functional code protocol packet unpacking according to the present application.
Detailed Description
The present invention will be described in detail with reference to the specific embodiments shown in the drawings, which are not intended to limit the present invention, and structural, methodological, or functional changes made by those skilled in the art according to the specific embodiments are included in the scope of the present invention.
In recent years, along with deep integration of industrialization and informatization and rapid promotion of internet of things, a modern industrial control platform has become a core control platform and a central nerve in the national key infrastructure fields of electric power, petrochemical industry, nuclear industry, aerospace, railways, water treatment and the like. To improve the safety of these facilities, it is necessary to regularly maintain these devices. In the prior art, generally, an operation and maintenance person uses an operation and maintenance device to test the operated and maintained device, so as to achieve the purpose of maintaining the operated and maintained device. However, when the operation and maintenance personnel perform operation and maintenance operations, the operation and maintenance personnel may perform irregular operations, which may cause potential safety hazards to the operated and maintained equipment.
Based on the background that operation and maintenance personnel may have irregular operation to bring potential safety hazard to the operated and maintained equipment, the operation and maintenance device of the mobile industrial control system is widely applied. The mobile industrial control system operation and maintenance device is used for auditing operation and maintenance behaviors and preventing and killing viruses and the like in the operation and maintenance operation process to carry out safe operation and maintenance by carrying out safe isolation between the operation and maintenance equipment and the operated and maintained equipment, so that the field safety control problem existing in the industrial control system is greatly reduced while the field operation and maintenance problem is solved. Therefore, the mobile industrial control system operation and maintenance device is very important for the field operation and maintenance of the industrial control system.
As shown in fig. 1, the operation and maintenance device of the mobile industrial control system performs security isolation between the operation and maintenance equipment and the operated and maintained equipment, the operation and maintenance equipment performs operation and maintenance operations on the operated and maintained equipment through a serial port, and the operation and maintenance device of the mobile industrial control system manages and controls an operation instruction issued by the operation and maintenance equipment according to an instruction filtering rule preset in the operation and maintenance device, and selectively blocks or releases the operation instruction issued by the operation and maintenance equipment. Therefore, the accuracy and stability of the instruction filtering rules preset in the mobile industrial control system operation and maintenance device are particularly important. Once the instruction filtering rules in the operation and maintenance device of the mobile industrial control system are wrong or insufficient in stability, the operation and maintenance work cannot be normally performed, and potential safety hazards are brought to the industrial control system, so that the operation and maintenance device of the mobile industrial control system needs to be tested regularly.
However, because the proprietary operation and maintenance instructions of the industrial control industry are more, the manual test consumes more manpower, and the manual test may have the conditions of wrong detection and missed detection, and the accuracy of the operation and maintenance device of the mobile industrial control system cannot be ensured, so the application provides an automatic testing device.
As shown in fig. 2, the present application provides an automatic testing apparatus for testing a mobile industrial control system operation and maintenance apparatus, the automatic testing apparatus includes: a first test unit 100 and a second test unit 200.
As shown in fig. 3, the first testing unit 100 is connected to a first port of the mobile industrial control system operation and maintenance device. And the second test unit 200 is connected with a second port of the operation and maintenance device of the mobile industrial control system. The first test unit 100 is communicatively coupled to the second test unit 200.
The first test unit 100 sends a test case to the mobile industrial control system operation and maintenance device, where the test case is used to trigger the mobile industrial control system operation and maintenance device to execute instruction management and control, and the instruction management and control includes matching the test case and intercepting or releasing the test case according to a matching result.
If the test case is released by the operation and maintenance device of the mobile industrial control system, the test case is received by the second test unit 200, the second test unit 200 is triggered to analyze the test case, and the analysis result of the test case is fed back to the first test unit 100.
The test case is preset with a release strategy, the release strategy is interception or release of the test case, the first test unit 100 obtains the release strategy preset by the test case according to an analysis result of the test case, if the release strategy is interception of the test case, it is determined that the mobile industrial control system operation and maintenance device fails to control the execution instruction of the test case, and if the release strategy is release of the test case, it is determined that the mobile industrial control system operation and maintenance device succeeds in control of the execution instruction of the test case.
If the test case is intercepted by the mobile industrial control system operation and maintenance device, the first test unit 100 analyzes the test case, obtains a release strategy preset by the test case according to an analysis result, determines that the mobile industrial control system operation and maintenance device successfully controls the execution instruction of the test case if the release strategy is the interception test case, and determines that the mobile industrial control system operation and maintenance device fails to control the execution instruction of the test case if the release strategy is the release test case.
The first test unit 100 generates a test report after the execution of each test case is completed.
As an alternative implementation, the first test unit 100 and the second test unit 200 are connected by a serial interface. The first testing unit 100 and the mobile industry control system operation and maintenance device can be connected through a serial interface, and similarly, the mobile industry control system operation and maintenance device and the first testing unit 100 can be connected through a serial interface.
As shown in fig. 4, after the first test unit 100 is connected to the mobile industrial control system operation and maintenance device through a serial interface, it communicates with the mobile industrial control system operation and maintenance device according to a preset serial port and baud rate.
The first test unit 100 sends the sending data packet to the mobile industrial control system operation and maintenance device through the serial interface. As an alternative implementation, the format of the data packet is written according to the IEC101 protocol.
As an alternative implementation, the data packet may be a function code protocol packet, and the function code protocol packet may be written by a test case according to the IEC101 protocol. Specifically, the test case is generated by simulating the operation and maintenance instruction of the industrial control industry, and the test case simulates the operation and maintenance instruction, so that the test case triggers the operation and maintenance device of the mobile industrial control system to execute instruction management and control when passing through the operation and maintenance device of the mobile industrial control system.
For the operation and maintenance device of the mobile industrial control system, when the device is used for isolating the operation and maintenance device from the operated and maintained device, the device can control the operation instruction command sent by the operation and maintenance device. According to the instruction filtering rule prestored in the device, two situations of releasing instructions and intercepting instructions can occur in instruction management and control.
For the situation of the interception command, the operation and maintenance device of the mobile industrial control system only executes the interception operation, and does not feed back any information to the operation and maintenance device. Therefore, according to the actual use situation of the operation and maintenance device of the mobile industrial control system, when the operation and maintenance device of the mobile industrial control system is tested, a tester cannot easily know whether a test case is intercepted.
Therefore, as an optional implementation manner, the automated testing apparatus provided by the present application includes a test case interception determination module 101. The test case interception judging module 101 is disposed in the first test unit 100, and is configured to judge whether a test case is intercepted by the mobile industrial control system operation and maintenance device.
As an optional implementation manner, the test case interception determination module 101 includes a timer, and the timer is provided with a first time threshold. When the first test unit 100 sends a test case, the timer starts timing, and if the timing time exceeds the first time threshold, the first test unit 100 still does not receive the analysis result of the test case fed back by the second test unit 200, it is determined that the test case is intercepted by the operation and maintenance device of the mobile industrial control system.
In the case of releasing the command, the operation and maintenance device of the mobile industrial control system does not perform any processing on the command, and the data packet received by the operation and maintenance device is sent to the operated and maintenance device in an original state. Therefore, the device for detecting the release of the test cases is designed according to the actual use condition of the operation and maintenance device of the mobile industrial control system.
As an alternative implementation, the automated testing device provided in the present application utilizes the second testing unit 200 to monitor the second interface. When the second testing unit 200 receives the data packet, it represents the mobile industrial control system operation and maintenance device to execute the release instruction management and control on the data packet sent by the first testing unit 100. At this time, the second testing unit 200 feeds back information to the first testing unit 100, so that the first testing unit 100 can know that the transmitted data packet is released.
In the embodiment provided by the present application, the format of the data packet transmitted by the first test unit 100 is written according to the IEC101 protocol. In IEC101, there are two types of frame format packets, and one type is a fixed frame length format packet, such as a link state message. The other type is a data packet with a variable frame length format, such as a function code protocol packet, which mainly realizes the message of a specific service function.
As an optional implementation manner, the first test unit 100 periodically sends a data packet in a fixed frame length format to the mobile industrial control system operation and maintenance device according to the IEC101 protocol, where the data packet in the fixed frame length format is used to maintain a link connection between the first test unit 100 and the mobile industrial control system operation and maintenance device.
The first test unit 100, except for sending test exceptions, also sends a data packet with a fixed frame length format, and the mobile industrial control system operation and maintenance device does not intercept the data packet with the fixed frame length format. Thus, the second test unit 200 may receive test cases and data packets in a fixed frame length format. However, the data packet with the fixed frame length format is useless for the test of the operation and maintenance device of the mobile industrial control system, and if the second test unit 200 feeds back the information of the received data packet with the fixed frame length format to the first test unit 100, a large amount of data transmission resources are occupied, which results in the reduction of the test efficiency.
Therefore, in the automatic testing apparatus provided by the present application, the second testing unit 200 may identify the received data packet, distinguish whether the data packet is a test case, and if the data packet is a test case, the second testing unit 200 may feed back information to the first testing unit 100. This way the data transfer bandwidth utilization between the first test unit 100 and the second test unit 200 is improved.
As an alternative implementation manner, the data packet with the fixed frame length format is sent to the second test unit 200 through the operation and maintenance apparatus of the mobile industrial control system. After the data packet with the fixed frame length format is received by the second test unit 200, the second test unit 200 unpacks the data packet with the fixed frame length format, the data packet with the fixed frame length format is identified by the second test unit 200 according to the unpacking result, the second test unit 200 judges that the received data is the data packet with the fixed frame length format but not a test case, and discards the data packet with the fixed frame length format.
When the first testing unit 100 sends a data packet with a variable frame length format, the data packet represents a test case sent by the first testing unit 100.
As an optional implementation manner, when the mobile industrial control system operation and maintenance device executes the instruction management control release function code protocol packet, the function code protocol packet is sent to the second test unit 200 through the second interface, the second test unit 200 receives the function code protocol packet, unpacks the function code protocol packet according to the structure of the IEC101 protocol to obtain the type identifier, and sends the type identifier to the first test unit 100 as an analysis result of the test case.
As an optional implementation manner, the first testing unit 100 includes a release policy storage module 102, and release policies corresponding to different types of identifiers are stored in the release policy storage module 102.
As an optional implementation manner, under the condition that the operation and maintenance device of the mobile industrial control system is in a normal working state, the release strategies corresponding to the different types of identifiers preset by the first test unit 100 are respectively consistent with the result of instruction management and control executed by the operation and maintenance device of the mobile industrial control system on the test cases corresponding to the different types of identifiers.
Specifically, as shown in fig. 5, for a test case, the second test unit 200 unpacks the function code protocol package according to the IEC101 protocol structure, so as to obtain the type identifier.
For example, for a function code protocol packet: 68090968530164010601000014d416, unpacking may result in a type identifier of 0x 64. For the type identification, the release policy corresponding to type identification 0x64 is stored in the release policy storage module 102 of the first test unit 100. The release policy is a policy expected to be executed by the mobile industrial control system operation and maintenance device, and is consistent with an instruction filtering rule preset in the mobile industrial control system operation and maintenance device, for example, a test case corresponding to the type identifier 0x64 is released.
As an alternative implementation, the correspondence between the type identifier and the release policy may be as shown in the following table. The type identifiers listed in the following table and the corresponding relationship of the release policy are only examples, and the type identifiers listed in the following table are only part of the type identifiers stored in the automatic test device provided by the present application.
Figure DEST_PATH_IMAGE001
However, when an error occurs in the operation and maintenance device of the mobile industrial control system, the instruction management and control executed actually may be different from the instruction management and control expected to be executed. Therefore, when the first test unit 100 receives the information fed back from the second test unit 200, which represents that the test case is released, the first test unit 100 needs to verify whether the test case is released correctly.
As an optional implementation manner, the first test unit 100 matches the received type identifier, acquires a release policy corresponding to the type identifier from the release policy storage module 102, determines that the mobile industrial control system operation and maintenance device fails to control the test case execution instruction if the release policy of the type identifier is an interception test case, and determines that the mobile industrial control system operation and maintenance device succeeds in controlling the test case execution instruction if the release policy is a release test case.
As an optional implementation manner, when the test case interception determination module 101 determines that the test case is intercepted by the mobile industrial control system operation and maintenance device, the first test unit 100 unpacks the function code protocol packet according to the structure body of the IEC101 protocol to obtain the type identifier,
the first testing unit 100 includes a release policy storage module 102, where release policies corresponding to different types of identifiers are stored in the release policy storage module 102;
the first test unit 100 matches the type identifier, acquires a release policy corresponding to the type identifier from the release policy storage module 102, determines that the mobile industrial control system operation and maintenance device successfully controls the execution instruction of the test case if the release policy of the type identifier is an interception test case, and determines that the mobile industrial control system operation and maintenance device fails to control the execution instruction of the test case if the release policy is a release test case.
As an alternative implementation manner, in order to verify the stability of the operation and maintenance device of the mobile industrial control system, the number of cycle tests may be set on the first test unit 100. For example, after the first test unit 100 completes all the test cases, the test report of each test case in the test round is output. And testing the operation and maintenance device of the mobile industrial control system again according to the preset cycle testing times.
While the invention has been described with reference to certain preferred embodiments, it will be understood by those skilled in the art that the following descriptions are provided for illustration and example only and not for the purpose of limiting the invention as defined by the appended claims: rather, the invention is intended to cover alternatives, modifications, substitutions, combinations and simplifications which may be equally effective without departing from the spirit and scope of the invention as defined by the appended claims.

Claims (10)

1. The utility model provides an automatic testing arrangement for test portable industrial control system fortune dimension device, its characterized in that, automatic testing arrangement includes:
the first test unit is connected with a first port of the mobile industrial control system operation and maintenance device;
the second test unit is connected with a second port of the mobile industrial control system operation and maintenance device;
the first test unit is in communication connection with the second test unit;
the first test unit sends a test case to the mobile industrial control system operation and maintenance device, the test case is used for triggering the mobile industrial control system operation and maintenance device to execute instruction management and control, and the instruction management and control comprises the steps of matching the test case and intercepting or releasing the test case according to a matching result;
if the test case is released by the mobile industrial control system operation and maintenance device, the test case is received by the second test unit, the second test unit is triggered to analyze the test case, and the analysis result of the test case is fed back to the first test unit;
the test case is preset with a release strategy, the release strategy is to intercept or release the test case,
the first testing unit acquires the release strategy preset by the test case according to the analysis result of the test case, if the release strategy is to intercept the test case, the mobile industrial control system operation and maintenance device is judged to fail to control the execution instruction of the test case, and if the release strategy is to release the test case, the mobile industrial control system operation and maintenance device is judged to succeed in controlling the execution instruction of the test case;
if the test case is intercepted by the mobile industrial control system operation and maintenance device, the first test unit analyzes the test case, a release strategy preset by the test case is obtained according to an analysis result, if the release strategy is that the test case is intercepted, the mobile industrial control system operation and maintenance device is judged to successfully control the execution instruction of the test case, and if the release strategy is that the test case is released, the mobile industrial control system operation and maintenance device is judged to fail to control the execution instruction of the test case;
and the first test unit generates a test report after the execution of each test case is completed.
2. The automated testing device of claim 1, wherein the test case is a function code protocol package written according to IEC101 protocol.
3. The automated testing device of claim 2, wherein the second interface sends the function code protocol packet to the second testing unit when the mobile industry control system operation and maintenance device executes command management and control to release the function code protocol packet;
and the second test unit receives the function code protocol packet, unpacks the function code protocol packet according to a structure body of an IEC101 protocol to obtain a type identifier, and sends the type identifier to the first test unit as an analysis result of the test case.
4. The automation test device of claim 3, wherein the first test unit comprises a release policy storage module, and release policies corresponding to different types of identifiers are stored in the release policy storage module;
the first test unit matches the received type identification, acquires the release strategy corresponding to the type identification from the release strategy storage module,
if the release strategy of the type identification is to intercept the test case, it is judged that the mobile industrial control system operation and maintenance device fails to control the execution instruction of the test case, and if the release strategy is to release the test case, it is judged that the mobile industrial control system operation and maintenance device successfully controls the execution instruction of the test case.
5. The automated testing apparatus of claim 2, wherein: the first test unit further comprises a test case interception judging module for judging whether the test case is intercepted by the mobile industrial control system operation and maintenance device;
the test case interception judging module comprises a timer, the timer is provided with a first time threshold, when the first test unit sends the test case, the timer starts timing, and if the timing time exceeds the first time threshold, the first test unit still does not receive the analysis result of the test case fed back by the second test unit, the test case is judged to be intercepted by the mobile industrial control system operation and maintenance device.
6. The automatic test device of claim 5, wherein when the test case interception determination module determines that the test case is intercepted by the mobile industrial control system operation and maintenance device, the first test unit unpacks the function code protocol package according to a structure body of an IEC101 protocol to obtain a type identifier,
the first test unit comprises a release strategy storage module, and release strategies corresponding to different type identifications are stored in the release strategy storage module;
the first testing unit matches the type identification, a release strategy corresponding to the type identification is obtained from the release strategy storage module, if the release strategy of the type identification is to intercept the test case, the mobile industrial control system operation and maintenance device is judged to successfully control the execution instruction of the test case, and if the release strategy is to release the test case, the mobile industrial control system operation and maintenance device is judged to fail to control the execution instruction of the test case.
7. The automatic testing device according to any one of claims 4 or 6, wherein, when the mobile industrial control system operation and maintenance device is in a normal working state, the release policies corresponding to different types of identifiers preset by the first testing unit are respectively consistent with the result of instruction management and control executed by the mobile industrial control system operation and maintenance device on the test cases corresponding to the types of identifiers.
8. The automated testing device according to claim 2, wherein the first testing unit periodically sends a fixed frame length format data packet to the mobile industry control system operation and maintenance device according to the IEC101 protocol, and the fixed frame length format data packet is used to maintain a link connection between the first testing unit and the mobile industry control system operation and maintenance device.
9. The automated testing device of claim 8, wherein the fixed frame length format data packet is sent to the second testing unit by the mobile industrial control system operation and maintenance device;
after the data packet with the fixed frame length format is received by the second testing unit, the second testing unit unpacks the data packet with the fixed frame length format, and the data packet with the fixed frame length format is identified by the second testing unit according to the unpacking result,
the second test unit judges that the data received this time is the data packet in the fixed frame length format but not the test case, and discards the data packet in the fixed frame length format.
10. The automated testing device of claim 1, wherein the first testing unit and the second testing unit are connected by a serial interface.
CN202111496718.0A 2021-12-09 2021-12-09 Automatic change testing arrangement Active CN113900877B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111496718.0A CN113900877B (en) 2021-12-09 2021-12-09 Automatic change testing arrangement

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111496718.0A CN113900877B (en) 2021-12-09 2021-12-09 Automatic change testing arrangement

Publications (2)

Publication Number Publication Date
CN113900877A true CN113900877A (en) 2022-01-07
CN113900877B CN113900877B (en) 2022-02-22

Family

ID=79025452

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111496718.0A Active CN113900877B (en) 2021-12-09 2021-12-09 Automatic change testing arrangement

Country Status (1)

Country Link
CN (1) CN113900877B (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090228987A1 (en) * 2008-03-04 2009-09-10 Microsoft Corporation Shield for user interface testing
CN107967206A (en) * 2016-10-20 2018-04-27 腾讯科技(深圳)有限公司 A kind of data testing system, request hold-up interception method and request blocking apparatus
CN109104337A (en) * 2018-11-01 2018-12-28 郑州云海信息技术有限公司 A kind of method, device and equipment of test network access control tool
CN111600781A (en) * 2020-07-27 2020-08-28 中国人民解放军国防科技大学 Firewall system stability testing method based on tester
CN113311809A (en) * 2021-05-28 2021-08-27 苗叶 Industrial control system-based safe operation and maintenance instruction blocking device and method

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090228987A1 (en) * 2008-03-04 2009-09-10 Microsoft Corporation Shield for user interface testing
CN107967206A (en) * 2016-10-20 2018-04-27 腾讯科技(深圳)有限公司 A kind of data testing system, request hold-up interception method and request blocking apparatus
CN109104337A (en) * 2018-11-01 2018-12-28 郑州云海信息技术有限公司 A kind of method, device and equipment of test network access control tool
CN111600781A (en) * 2020-07-27 2020-08-28 中国人民解放军国防科技大学 Firewall system stability testing method based on tester
CN113311809A (en) * 2021-05-28 2021-08-27 苗叶 Industrial control system-based safe operation and maintenance instruction blocking device and method

Also Published As

Publication number Publication date
CN113900877B (en) 2022-02-22

Similar Documents

Publication Publication Date Title
US10873594B2 (en) Test system and method for identifying security vulnerabilities of a device under test
Udd et al. Exploiting bro for intrusion detection in a SCADA system
CN108848067B (en) OPC protocol safety protection method for intelligently learning and presetting read-only white list rule
CN113507436B (en) Power grid embedded terminal fuzzy test method aiming at GOOSE protocol
CN110995764B (en) Mobile cellular network application layer data flow fuzzy test method, electronic equipment and storage medium
Salazar et al. 5greplay: A 5g network traffic fuzzer-application to attack injection
CN106534130A (en) Method and system for debugging set-top box based on embedded web
CN112398829A (en) Network attack simulation method and system for power system
CN112087466A (en) Power network security system based on identity recognition and protection method thereof
CN114050937B (en) Mailbox service unavailability processing method and device, electronic equipment and storage medium
CN111669371A (en) Network attack restoration system and method suitable for power network
CN111683044A (en) Method and device for automatically detecting forward isolation device strategy
CN113900877B (en) Automatic change testing arrangement
CN113225342B (en) Communication abnormality detection method and device, electronic equipment and storage medium
Garbelini et al. Towards Automated Fuzzing of 4G/5G Protocol Implementations Over the Air
CN113055374A (en) Detection method and system for IEC104 power protocol security test
Pospisil et al. Active scanning in the industrial control systems
CN101547127B (en) Identification method of inside and outside network messages
Chen et al. Sherlock on Specs: Building {LTE} Conformance Tests through Automated Reasoning
CN107104981B (en) Content auditing system based on active defense mechanism and content auditing method thereof
CN113347145B (en) 5G wireless communication application secret evaluation system and method
CN113676940A (en) Isolation test method and isolation test system for 5G power grid slice
CN115102890A (en) Vehicle-mounted terminal system intrusion detection function test system and method
CN114338074A (en) Automatic detection method and detection system for IP white list of power distribution terminal
CN111786826A (en) Industrial control equipment operation and maintenance auditing system, industrial control equipment operation and maintenance method and computer equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant